yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] perpetualmotionuk:
I smell a rat...

A 52yo real estate developer, whose not a coder, but used to be a "cracker" and knows what is possible? Anyone else here think this doesn't make a bit of sense?

It's funny, but it sounds like someone is trying to stir up some FUD by making claims that Android is somehow doing an "All your data are belong to us...". I hope Apple aren't paying your cheques!
[Android Software/Hacking General [Developers Only]] Quantumstate:
@perpetualmotionuk: Be advised that there is a difference between mathematics and decryption, and coding. Yes I can do some coding, but not at a level necessary to analyze and modify an operating system.

If Apple were paying my 'cheques', wouldn't I come in with some sort of proof that monitoring is taking place? Rather than asking what others have found?

Now, rather than trying to tear people down, why don't you use that considerable nose to investigate this yourself?
[Android Software/Hacking General [Developers Only]] Quantumstate:
No one's seen anything about info leakage?
[Android Software/Hacking General [Developers Only]] cbaltzer:
Most of that data is pulled from search history, I suspect. Which you can disable, if I recall. Don't have my phone on me at the moment to confirm.
[Android Software/Hacking General [Developers Only]] Brut.all:
I just did a very simple test on an emulator: after ~15 minutes of running system there was 0 (zero, null) of network packets. Now I want to do the same on a device with clean system, but I think results will be the same or similar (SDK system is just normal Android - very similar to these from devices).

I have a feeling that even if I will catch zero packets as well, you will be asking whether Google send something mysterious through... errr... bluetooth? Some hidden antenna?
[Android Software/Hacking General [Developers Only]] hedjemunkee:
If you're worried about Google tracking your info...root the phone and don't install the Google apps. What do ya know...problem solved.

If you're still worried that people are tracking what you are doing see steps below.

1) Flush phone or give to a homeless guy to throw them off.

2) Destroy Computers.

3) Liquidate everything you own.

4) Walk into the woods and live off the land.

5) Kill self shortly after because they already have a file on you.

You say you're a 52 year old real estate developer...guess what...they're already tracking you. You're already helping to build "cybernet" just by living and breathing.

And if you are really worried about your "220 year old Constitutional Rights" then go read the Patriot Act and discover that you don't have ****.

I'm normally not one to flame...but you are an absolute idiot.
[Android Software/Hacking General [Developers Only]] pborg:
I'm not an English person, excuse for the syntax/grammar/... mistakes I'd could make.

I don't understand WHY this person could be considered as "an absolute idiot" by ASKING if some 'data' are sent over the network through the phone.

Facebook, with it's ad system is sending information for each ad displayed (not alot, but still some !)....

ADS.GOOGLE do you have any idea about what's behind !?

I don't have the number (nobody have it) of webpages using it but it's huge. with this you can track navigation of people, establish profiles, link to a physical person. Without your consent.

I understand the concern of the "OP" here. I don't think the data sent are easy to "catch", or are systematically sent... maybe there is no, and you are paranoid. But it "COULD". So easily. I'm from the young tech generation.

And to quote

People who don't ask themselve the question, or wich refuse to be open minded enough to consider the right to ask this question ... could be surprised very soon. I'm not directly affraid of "google". I'm affraid of those 'blind' people.

You'll be dead in less than 10years !? I hope we can share some of the darkness you're talking about. your parent's generation started it, you continued it.

Anyway, back to the topic.

Why in my pocess list i've : (app id number) com.ap.SnapPhoto:remote

even when I do not use the camera !?

...when I notice my battery is being used more than usual I check the process list and I find this...

What's this "remote" !?

Maybe "remote" refers to "another app wich launch this app"... ? Otherwise... wow.
[Android Software/Hacking General [Developers Only]] Quantumstate:
This is a good idea, but it should be run at least 24 hours. Can you direct me to resources on getting the snapdragon emulator for Debian? Where to get an Android image installable to it?

It's my understanding that built in to HTC phones is an HTC 'phone home' provision. Any info on that?

Thank you pborg. I suspect that at least half the ppl here understand and agree with my concerns. Maybe another third do not understand, and the rest watch Fox News and are heavily propagandized.

And no, I nor my parents did not continue it. We have fought this corporatization and radical self-interested monopolization every step of the way, but many Americans are oblivious so it's a losing battle. (Corporations are "people" now, and can donate unlimited amounts of money to political campaigns) The oblivious will only find out when all corporations are ultimately merged into one megalith, controlling every aspect of our lives in a new corporate feudalism in our Thunderdome. As serfs if we piss off ExxonGoogleGMMicrosoftBechtelKrogerGEBeaconKKRFlourCitibankAmazon, we instantly lose our job, housing, savings, food, car, and everything else at once. Ever seen the movie Gattica? Or Fahrenheit 451? (no, not 911, but 451)

Unlikely? It's merely the mathematical extension of the trajectory we've been on for 30 years.
[Android Software/Hacking General [Developers Only]] pborg:
Thanks for your thoughts, I hope you're in the "green house estate" ;)

If I find something matching what you ask, I'll post it here!
[Android Software/Hacking General [Developers Only]] Quantumstate:
(As one of the few Leftist developers, I always build in green features to the extent I can, try to give good value to my residents, and make some room for the less fortunate. God is in the details, and in not being greedy)
[Android Software/Hacking General [Developers Only]] Quantumstate:
UAE: BlackBerry phones could threaten security

"Just over a year ago, RIM criticized a directive by UAE state-owned mobile operator Etisalat telling the company's more than 145,000 BlackBerry users to install software described as an 'upgrade ... required for service enhancements.'

"RIM said tests showed the update was in fact spy software that could allow outsiders to access private information stored on the phones."

A hidden world, growing beyond control

"Every day, collection systems at the National Security Agency intercept and store 1.7 billion e-mails, phone calls and other types of communications."

The Drudge and Politico sewers still rule our world -- "fights over nothing" -- and happily distract us from Top Secret America, what it does and what it takes.

As George Carlin put it several years ago, in an amazingly succinct summary of so many things:

"And now, they're coming for your Social Security money - they want your ****ing retirement money - they want it back - so they can give it to their criminal friends on Wall Street. And you know something? They'll get it. They'll get it all from you sooner or later. Because they own this ****ing place. It's a Big Club: and you're not in it."
[Android Software/Hacking General [Developers Only]] Skye Menjou:
I can't wait for Google TV.

Maybe it will be like good ol' 1984.

I personally do not fear my location being known but my data I do worry about.

I do research on things.I do not want to having everything I have written or aqquired floating in the "cloud".

So many people storing valuable information and files on Google Docs, Skydrive and other things.

I do Server work and most of the older companies agree with my statement.Your data is safer on your own server and in your own network.

I only let non-important stuff in the cloud.
[Android Software/Hacking General [Developers Only]] Brut.all:
@Skye Menjou

Data in the cloud could be perfectly secure - it could be encrypted and decrypted on client side. This is how e.g. Dropbox and LastPass works.
[Android Software/Hacking General [Developers Only]] Quantumstate:
@Brut.all

LOL, no. 'Master key'.
[Android Software/Hacking General [Developers Only]] Brut.all:
Hmm? Could you explain, what do you mean?
[Android Software/Hacking General [Developers Only]] kieranc:
So what's you not using an android phone going to fix? Sure, the world's heading to hell in a handbasket but that's no reason to use a crappy phone.

I think the chances of your personal data being disseminated are far higher if you use Windows or Internet Explorer than a derivative of Linux. Sure Google have some info about me but.. that's the cost of using their service, I consider it a reasonable cost. I can choose to close my account and ask them to delete my data if I choose and I have no reason to think they wouldn't do so if I asked.

It's fairly easy to monitor if the phone is transmitting any data with tcpdump or similar, or just disable 3G and monitor the access point you're connected to... I don't feel the need to though.

You have a choice, use it or don't. Using it and making wild allegations about what it's doing with your data is helping no-one.
[Android Software/Hacking General [Developers Only]] Quantumstate:
Who's doing the encrypting? That-search-engine-everybody-uses. If you're familiar with public-key cryptography, there's a private key and public key. With "The Cloud" you hold the public key to your belongings, they hold the private one; both must be present and factor against one another before decrypting takes place. Further, something can be encrypted with more than one key, so if "The Cloud" so chooses it can provide one of the keys to the En Ess Ay and fiends. ('master key')

BFAHAHAHA!!

'ask them to delete your data'...

You're funny.

That will never, NEVER happen.

So, you are willing to capitulate all your valuable information to The Machine, for a little transient convenience. Noticed credit card companies have lately been asking whether you'd like to add any of your friends to your credit card? Now; why would they want to know that? For connections, that's why. To know who you know, for marketing and collections purposes. IOW, to gain total control over you and your actions. How else would they do it?

You cheerfully turn over your freedom, for a pence of nominal and transient security, in your naive fog.

I've lost all respect for you. You clearly do not understand what is at stake.

Please watch the movies Gattaca and Fahrenheit 451, and think about them for a long, long time.

Try and understand that what I am actually doing is trying to have it both ways. A good phone, and security. This is the nature of what I am exploring. The choice is not as you say, a good phone, in exchange for my soul.

No. This is your choice. I am not making "wild allegations", I am giving proof of what I am talking about. It is you who refuse to examine, or do not understand, my proof. This is not my fault.

I ask the wisdom of this forum, in order to determine the actual facts. I would like to know what the deeper minds know about this issue. It was my understanding that the purpose of forums is to ask questions and explore issues. Not to stupidly bicker, or nit-pick, or one-up.

I am asking weighty questions here, and if you can't handle it, or fear the implications, feel free to move along.
[Android Software/Hacking General [Developers Only]] Brut.all:
No. As I said it's encrypted and decrypted on client side - servers store encrypted data only and don't have access to any kind of keys. I'm not sure about Dropbox, but LastPass works that way for sure.
[Android Software/Hacking General [Developers Only]] Quantumstate:
Well, why did you ask then?!

Show me proof of exactly how this works.

Edit: Never mind. Off-topic. I don't care and I'll never use it.
[Android Software/Hacking General [Developers Only]] Brut.all:
Ask what? Skye Menjou said, that cloud is insecure, so I disagreed, because it could be secure if you will use client-side encryption. What's the problem?
[Android Software/Hacking General [Developers Only]] Bjd223:
This is awesome. All the company's computer infrastructures will combine into Skynet, which will become aware and destroy all mankind.

On a serious note, I think it's important to ask these questions. I do not know about you but I loathe the thought of Google assembling a portfolio of 'me', the last thing I need or want is more targeted ads and / or people in my business. I am not a criminal (for the most part, as much as anyone I suppose) and am not 'afraid' of them getting anything I say or type into my phone, I have nothing important on my phone but I still do not want them to have it.

I have heard that Google is testing audible ads while you are in voice calls, WTF. But I doubt they will implement it as people will go ape ****.
[Android Software/Hacking General [Developers Only]] Quantumstate:
@Bjd223, it's clear that many people are lulled into complacency, and ridicule what they do not understand. Obviously you haven't read the articles I'd posted. I don't care, it's your future. I tried to help.

It's not just ads. It's a subtle control that gradually ensues. Who hasn't felt subdued in what they can say at work? Imagine feeling like that all the time out of fear of losing your job and/or home because of something you said off-duty. Ah, never mind. It'll all be OK. Remember: War is peace. Freedom is slavery. Ignorance is strength.
[Android Software/Hacking General [Developers Only]] ksidirt:
Oh my God. That was the most humorous thread I've read in a long time. Time to go back to work.

I don't think Google wants us to lose our jobs because then we won't have any money to buy their "private information sharing" phone apps.
[Android Software/Hacking General [Developers Only]] Zoltair Wright:
At heart I think there's a practical question here, which is, "How do I stop Android from collecting information about me?" The AOSP code is well combed-over - if you really have doubts, ask Cyanogen, koush, or any of the other developers who are familiar with the source. There's nothing inherently there to breach your privacy.

If you install the Google apps, it's a totally different story. Those are closed source and probably do collect your data for advertising. If you don't like that, get a ROM that doesn't include them. Choose the 3rd party apps you install carefully, as they have the ability to collect your data as well. Make sure you're deactivating javascript in the browser and clearing your cookies, same as you would on your desktop.

For my two cents, doing all of this is a pain in the ass and the privacy gained is not worth the convenience lost. But that's my decision, everyone must make it for themselves.
[Android Software/Hacking General [Developers Only]] Quantumstate:
Agree to an extent Zoltair.

I've asked the devs, and no reply. Was hoping some expansion on the issue in this thread, would help.

I suspect you're right, that the OS is fine but that care must be taken with the apps. Didn't realize that G**gle apps are closed, but they are irrelevant to me anyway.
[Android Software/Hacking General [Developers Only]] Quantumstate:
Oh FFS, out today:

What your phone app doesn't say: It's watching

"Lookout found that nearly a quarter of the iPhone apps and almost half the Android apps contained software code that contained those capabilities."

Looks like third-party apps are as much a concern as G**gle apps, and that the first app needed is a Little Snitch type monitor.

Turns out that Lookout makes such an app, but what's their provenance? Turns out they're a security company funded by angel investors, who offer their beta app for free, partly to gather 'genome' data of offensive apps, and partly to gain entry and credibility. As they presented to BlackHat this week I am inclined to trust them, although they make use of 'The Cloud' for backups which isn't an option for me.

(BTW, the BlackHat briefings are interesting)

The ideal would be an open-source Little Snitch type app; one that gives me control, and doesn't need to report Home on what it finds.

I have to say, I am disappointed in this forum with regard to security. The fact that so many ridicule the very idea, speaks volumes about the lack of knowledge here. Kudos to those few who understand, but I am surprised that a forum that puts itself forth as a dev forum could be so much in the dark. Lookout's CEO John Hering said of the preliminary findings of their App Genome Project that, "We found that not only users, but developers as well, don't know what's happening in their apps, even in their own apps, which is fascinating."

I should laugh, but to cry...
[Android Software/Hacking General [Developers Only]] akapoor:
Not exactly sure as to why this is bringing so much hype now, considering all the other things that people can be "traced" with.

Even if you have a simple Nokia (green-black screen), you can still be located through IMEI tracing.

When you buy a new car, you get the option (generally) of OnStar - which allows for complete ACCESS to your car. In fact, they have the ability to remotely unlock your car from any location.

Speaking of which, whenever you start driving into highly populated or dense areas, you are monitored 24x7 by cameras and drones.

This isn't something new, it's been going for quite some time. Don't get me wrong, I'm not a spokesperson of "Big Brother," but just saying that this technology has been available for a while.

EDIT: Then again, you also have the Patriot Act, passed by our oh-so-wonderful government to allow them to "tap" onto any conversation, read any email, process and data they wish about anyone. If you are going to tell me that they needed (or need) a warrant to do so, please wake up and get out of your cave. The Patriot Act has been abused incredibly.

But let's keep this on topic ... android.
[Android Software/Hacking General [Developers Only]] Quantumstate:
Another rogue app stealing data, security firm reports [updated]

@akapoor, to me it's not important to differentiate between multinationals and government gathering your data to keep forever for marketing, collections, and the potential political purposes of a Police State... and rogue third-party developers. Just because they're invisible, doesn't mean they're not there... although it does make it easier to live in denial. They're all equally pernicious and should be stopped, Now.

I'll never buy an OnStar car. And many cars now have data recorders which record more than just the last few seconds... there have been legal cases where the car actually testified against its owner. I always oppose traffic cameras... it's all I can do. And tapping of my phone, well there are certain providers who've proven very cooperative with the Bush warrantless wiretapping --specifically Verizon and AT&T-- and certain ones who've not --specifically Qwest and TMobile--.
[Android Software/Hacking General [Developers Only]] akapoor:
Again, I'm not saying that I favor the actions of these 3rd-party devs or the government in general. But I am trying to say that as technology progresses more, people are (or should be) realizing what they are more prone to.

Simply put, nothing is ever safe anymore.

And yes, I agree with you. OnStar is something that if the dealer attempts to convince me into purchasing, I'll walk right out.

Regarding the traffic cameras - again, I agree, but that's all we can do...oppose what the government wants to impose.
[Android Software/Hacking General [Developers Only]] Quantumstate:
The service notwithstanding, if the car even has the OnStar hardware, it's corrupted.

aSpotCat (Android Market)

"In addition to the security it allows you to see that has been broken through on your phone, you can also easily open or uninstall the apps as well as get details about the app or share it with friends, by selecting the app from any of the drop downs."
[Android Software/Hacking General [Developers Only]] akapoor:
Good point!

I recently found out from a friend that OnStar has the ability to:

a) Reduce your speed

b) Limit the fuel available to the engine.

plus other stuff..

Pretty shocking that people opt in for features such as these.

I guess ignorance really is bliss...
[Android Software/Hacking General [Developers Only]] Quantumstate:
Yep.

c) Silently listen in on conversations in the cabin...

{creepy}

An eye-opening article in the WSJ:

Dark Side Arises for Phone Apps

"Unlike Apple or BlackBerry maker Research In Motion Ltd., Google doesn't have employees dedicated to vetting applications submitted to its Android store. Google said it removes apps that violate its policies, but largely relies on users to alert it to bad software. 'We check reactively,' said a Google spokesman. 'There is no manual bottleneck.'"

"A Google spokesman said the company has put in place security measures, such as remotely disabling apps found to be malicious"...

WHAT?! Which apps can be disabled, only Market apps, or any? If any, how do they know? What else can be monitored/disabled?

Here's an absolutely marvelous augmented-reality app (does it work in the dark?) which I hope is safe:

Layar

Unfortunately their Privacy Policy gives a 404 error.

Edit: (expeditious) Reply from Layar:

"Admin, Jul 29 17:50 (CEST):

Thanks for letting us know. We're working on the issue right now. We don't keep your data we only use it to provide you the right content."
[Android Software/Hacking General [Developers Only]] Brut.all:
It's not about IT professionalism, but... errr... personality? There are always people, who talk about NWO, government/Google stealing their privacy and about other conspiracy theories - they're usually call other people naive, blind, etc. On the other hand the other party laugh at them and calls them madmen.

I'm sad that this war has moved from WTC, etc. to the IT world :-/

Errr... what? 75% of my installed apps don't even have access to the internet! I guess they steal my data using telepathy. But this is nothing new to me: "conspiracy people" always call their thoughts using term: "facts".

Unfortunately for some reason I can't read this article. I'm curious whether "almost half the Android apps" are words from Lookout or from an author of this art. Because "conspiracy people" love to say, that someone with great authority said something, that he didn't. Actually I found on the Lookout blog this data:

29% of free applications on Android have the capability to access a user’s location, compared with 33% of free applications on iPhone

Nearly twice as many free applications have the capability to access user’s contact data on iPhone (14%) as compared to Android (8%)

Even these 29% and 8% not necessarily steal your data, but just use it, so where is this "almost half"? I guess it's about ads. Some smart guy had an idea to call all apps with adds "stealing your privacy". Yeah, right.

And why there are everywhere talks about same wallpaper app which steals your data, if there are about 40000 similar apps in the Market ("almost half" of apps in the Market)?

I ain't saying that stealing data isn't possible or it doesn't happen. Sure it does, but the problem definitely isn't that big as you see it.

What a mysterious power of Google, huh? Well, no. Just look into app permissions and you will know, what it can and what not. Getting data about other installed apps is in public Android API. Installing/uninstalling apps too. (EDIT: actually Market has a superpower of installing/uninstalling apps without using a package manager, so it can do it in the background. So yeah, right, it's privileged over other apps)

For me your problem is something like: "How to ask someone what time is it and don't let him know, that I don't have a watch. He would know something private about me!". You want to use some feature which depends on some of your data, but you don't want to share this data. This is ridiculous for me.